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Abstract 

We compute modular Galois representations associated with a 
newform /, and study the related problem of computing the coeffi- 
cients of / modulo a small prime I. To this end, we design a practical 
variant of the complex approximations method presented in [ECU] . 
Its efficiency stems from several new ingredients. For instance, we use 
fast exponentiation in the modular jacobian instead of analytic contin- 
uation, which greatly reduces the need to compute abelian integrals, 
since most of the computation handles divisors. Also, we introduce 
an efficient way to compute arithmetically well-behaved functions on 
jacobians. We illustrate our method on the newform A, and manage 
to compute for the first time the associated faithful representation 
modulo I and the values modulo I of Ramanujan's r function at huge 
primes for I G {11,13,17,19}. In particular, we get rid of the sign 
ambiguity stemming from the use of a non-faithful representation as 
in |Bos07| . 
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1 Introduction 



Consider a newform f = q + Yln^2 a n ( f l Sk(Ti(N)) of weight k and level 
NeN*. Attached to it is a system of Hecke eigenvalues A/: T^jv — > 1>k s , 
namely 

Tf = \f(T)f, TeT k , N , 

where T^. jv = Z[T n , n ^ 2] denotes the Hecke algebra acting on cuspforms 
of weight k and level N, and where Z^ is the ring of integers of the number 
field Kf = Q(a n , ri ^ 2) of /. Let I be a prime of inertia degree 1 of Kf, lying 
above a rational prime £ ^ k — 1 which does not divide iV. Reducing modulo 
I, we get a ring morphism A/j: T^jv — >* ^f- By level-lowering theorems (cf 
[Rib94] for £ > 2 and [BuzOO] for £ = 2), there exists another ring morphism 
fjL/y. T 2 in — > F^ such that A/ > [(T P ) = fif^(T p ) e F^ for all rational primes 
p. This other Hecke algebra T2/N also acts on the jacobian J\(IN) of the 
modular curve X 1 (£N), so let us consider the subspace 

V f) i= f| Ker(T-[ m (T)})\ Ji{mm 

of the ^-torsion part of Ji(£N). One shows (cf [Edi 92] . theorem 9.2) that Vf } \ 
has dimension 2 as a vector space over F^ except for a finite number of I, 
and that it is defined over Q (cf [DS05j . section 7.9). We thus get a Galois 
representation 

Pf y.GQ^GL(V Li )-GL 2 (¥ e ), 

which is unramified outside £N (cf [DS05] , theorem 9.6.5). Let L = Q Kerp/ ' ( 
denote the field cut out by this representation. We have the following dia- 
gram: 

G Q —^GL(V ftl ), 




Gal(L/Q) 



1 It is the case if £ > k and the associated Galois representation is irreducible, which is 
the case except for finitely many I. We will exclude those cases from now on. In particular, 
when we work with / = A, this implies we have to exclude I — 23 (EdiClJ, top of page 
5), cf the last sentence in our results section. 
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where we denote with an extra bar the induced representation 

p f y. Gal(L/Q) — > GL(Vf ti ). 

Furthermore, it follows from the Eichler-Shimura relation (cf [DS05J, theorem 
8.7.2) that for p \ £N, the image of the Frobenius element (j^^j by pf t \ has 
characteristic polynomial 

X 2 - a p X + e(p)p k - 1 e¥ e [X], 

where a p denotes the p-th coefficient in the g-expansion of the newform /, 
e is the Dirichlet character of /, and both have been reduced modulo [. 
Consequently, the knowledge of the Galois representation pfj allows us to 
recover the coefficients of the g-expansion of / modulo I. 

It would be interesting to compute explicitly these Galois representations 
Pf i, for several reasons: first, simply for the sake of the Galois representation 
itself, next, because the number field L will often be an explicit solution to 
the inverse Galois problem for GL 2 (F^) (cf |Bos07aj . [Bosll] ). and, last but 
not least, because it gives a fast way of computing the g-expansion coefficients 
a p of / modulo I. Letting £ vary, we thus obtain a Schoof-like algorithm (cf 
|Sch95j ) to compute g-expansions of newforms, as bounds on the coefficients 
dp £1X6 well-known. 

Computing these representations is the goal pursued by the book [ECU] . 
The idea is to approximate f-torsion divisors representing the points of Vf \. 
To compute these torsion divisors, the book |EClf] suggests two approaches: 
a probabilistic one ( |CouC13] , chapter 13), which creates ^-torsion divisors 
by applying Hecke operators to random divisors on the modular curve over 
small finite fields, and a deterministic one ( |CouC12~] . chapter 12), which 
relies on fast exponentiation to create approximations of torsion divisors on 
the modular curve over C. However, neither of these two methods is practical 
at all, although their theoritical complexities are polynomial in £. 

In |Bos07j . J. Bosman presents a practical variant of the complex method. 
It uses an analytic continuation method (cf for instance |Li03j ) instead of fast 
exponentiation. To deal with the Abel-Jacobi map 

j: T>w° (X X {W)){C) ^ Ji(£N)(C), 

J. Bosman has to compute a lot of abelian integrals. This leads to precision 
issues as this requires summing g-series very close to the edge of the conver- 
gence disk, and because of the singular locus of j, of which little is known. 
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J. Bosman still manages to compute representations up to level 17 and 19, 
but he only gets projective Galois representations in PGL 2 (F£) instead of 
GL2(¥c), which means he gets the coefficients a p mod ( up to a sign only (cf 
for instance the table on the very first page of [ECU] ). 

To our understanding, the implementation |Zenl2] by J. Zeng of the prob- 
abilistic method suffers from the same limitations. J. Zeng computes poly- 
nomials defining projective non-faithful representations, but seems not to 
compute actual coefficients. 

In this paper, we present another improved, practical and deterministic 
version of the complex approximations approach, which is provable in that 
the singular locus of j is no longer a problem. It has far fewer precision 
issues, as it computes abelian integrals only along very short paths well in- 
side the convergence disks, and uses K. Khuri-Makdisi's algorithms |KM04] 
[KM07J for fast exponentiation in the jacobian. Consequently, we get ap- 
proximations of torsion divisors fairly easily. In the last step, to increase the 
precision, we can use Newton iteration simply on the condition [£]D ~ 0, 
instead of j(D) = x for some x G Ji(£N)[£]. This allows us to compute the 
full Galois representations for the levels 17 and 19. As a consequence, we 
can for instance find the signs which were missing in J. Bosman's results. 
Furthermore, we believe that an optimisation of our code would allow us to 
compute representations in higher levels 29 and even 31, which has never 
been done yet. We give a detailed description of our method in the following 
sections of this paper. 

Like J. Bosman, we limit ourselves to prime levels £ for commoditjU. This 
implies that we can only use our algorithm to compute Galois representations 
attached to newforms of weight 2 and level £, or to newforms of any weight 
but of level 1. Typically, we use it on the newform A, which is of weight 12 
and level 1. As the genus of Xi(£) is g = ^~ 5 ^~ 7 - > for £ ^ 11 and is for 
£ ^ 7, we will assume I ^ 11 throughout this paper. 

In the next section, we present a quick review of our algorithm. Then, 
in section 3, we give a detailed description of the key steps. Finally, in the 
last section, we present actual computations of a Galois representation and 
of coefficients of a newform, and we give complexity estimates. 

2 However, we think our algorithm could easily be extended to general levels N. 
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2 Outline of the algorithm 



Our first task consists in computing the period lattice A of X\(£), which we 
do by integrating cuspforms along modular symbols. Using our knowledge 
of the action of the Hecke algebra on modular symbols, we then deduce an 
analytic representation of the £-torsion subspace V/j C Ji(£)(C) = C 9 /A. 
Next, we find a way to invert the Abel-Jacobi map j, so that we may, for 
each x G Ji(£)(C), find a null-degree divisor D x on X such that j(D x ) = x, 
and especially so for two £-torsion divisor classes X\ and 22 forming a basis 
of the two-dimensional F^-subspace Vfj. 

We first compute the period lattice A by computing a Z-basis of the 
singular homology Hi (X 1 (£) (C) , Z) made up of modular symbols (cf [Ste07] 
or [Cre97] ) , along which we integrate term-by-term the g-expansions of a basis 
°f cuspforms of weight 2. Now, by computing the Hecke action 
on Ji (£)[£], we can express our two divisor classes X\ and X2 as points of 
|A/A C C 9 /A. We lift them to (as-short-as-possible) vectors x[, x 2 G C 9 . 
Next, we choose 2g pairs of points (P n , Pn)i^n^2g, with each P' n very close to 
P n , and we compute their "Abel-Jacobi" images 



where for each n the integration path from P n to P' n is naturally chosen as 
a very shortjf] path joining P n to the very close point P' n . Consequently, the 
vectors p n will be very short. Moreover, we choose the pairs (Pm Pn) so 
that the vectors p n span C 9 over R in a not-too-ill-conditioned way, which 
is possible as there are 2g of them; we can thus express our points Xk as 
IR-linear combinations of the p n , 



Now, as the p n are very short, the coefficients t n ^ are very large, so that 
we still have a reasonably good approximation 

29 



3 For instance, P' n will be in the same coordinate chart as P n , and we naturally choose 
a path which stays inside this coordinate chart. 



Pn = 





n=l 




n=l 
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where [•] stands for the nearest integer. Consequently, the divisor 

^ bis = ELM(ra-ra) 

n=l 

will map by the Abel-Jacobi map to a reasonable approximation of Xj.. How- 
ever, it has large coefficients, so we use K. Khuri-Makdisi's algorithms [KM04J 
[KM07] to reduce it, that is to say we compute an effective divisor £)£ rude of 
degree d = 2g + 1 such that D — D is linearly equivalent to -D^ lg , where D 
is another effective divisor of degree do used as an origin. 

This way, we find approximations of ^-torsion divisors using only integrals 
along the short paths p n , which are well inside the convergence disks. Con- 
sequently we have far fewer precision issues than with J. Bosnian's method 
|Bos07j . 

We next refine these approximations using Newton iteration on the equa- 
tion £(D — D ) ~ 0. We thus get two ^-torsion divisors and D^ 110 whose 
images by the Abel-Jacobi map form a basis of the ^-torsion subspace Vfj. 
We then compute all the reduced divisors 

D ajb ~aD* ne + bD^ e , a,be¥ e , 

yielding a collection of I 2 reduced divisors corresponding to the I 2 points of 
Vf i, and evaluate them by a well-chosen Galois-equivariant map a : Vfj — > 
Q. The polynomial 

F(X)= J] (X-a(D a>b )) 

a,b&¥ e 
(o,b)^(0,0) 

then lies in Q[X]; we can recognise its coefficients using continued fractions. 
This polynomial encodes the Galois representation we are attempting to com- 
pute, in that its splitting field L over Q is the number field cut out by the 
representation pfj, and Gal(L/Q) acts on its roots ip(D a j,) just like GL 2 (¥e) 
acts on (a, b) E¥ 2 . 

Our final task consists is to describe the image of Frobenius elements by 
this representation. For this, we adapt T. and V. Dokchitser's work |DoklO] 
to get resolvents 

T C (X) G Q[X], C similarity class of GL 2 (¥ e ) 
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such that 




polynomial (cf [DoklO] or the relevant part of the next section). 

Finally, we can now compute the coefficients a p of the g-expansion of / 
modulo I: 



3 Detailed description of the steps 

We first show in subsection 13.11 how to efficiently compute the period lattice 
of Xi(£). Then, we explain in 13.21 how to use K. Khuri-Makdisi's algorithms 
[KM04j |KM07] on Xi(£); our method requires carefully chosing Eisenstein 
series, as explained in 13.31 After this, we show in 13.41 how to use these 
algorithms to reduce a big divisor sum, and in 13.51 we explain how to use 
Newton iteration to refine the result into ^-torsion. Finally, we explain in 13.61 
how to construct a well-behaved function on the jacobian J\(l) and how to 
evaluate it at the ^-torsion divisors, and we conclude by describing in 13.71 an 
efficient way of computing the image of the Frobenius elements by the Galois 
representation. 

3.1 Computing the periods of X\(l) 

Computing the period lattice A amounts, by the Manin-Drinfeld theorem 
(cf |Lan95] . chapter IV, theorem 2.1), to compute integrals of newforms of 
weight 2 along modular symbols, such as 



These integrals can be computed by integrating g-expansions term by term. 
However, we have to split the integration path so that the resulting series 
converges. Furthermore, to increase the convergence speed, we need the path 
ends to lie well-inside the convergence disks. 
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To reduce the number of integrals we compute, we use the adjointness 
property of the Hecke operators with respect to the integration pairing be- 
tween modular symbols and cuspforms. In general, the modular symbol 
{oo, 0} alone does not span the rational homology of the modular curve, even 
over T 2> £ <S> Q, so we introduce other modular symbols, the twisted winding 
elements w p . 

More precisely, define (cf [BosC6j, section 6.3), for any p ^ I prime or 
p = 1, the twisted winding element 

w p= Y] (- 

a mod p 

where C^j denotes the Legendre symbol, which we define to be 1 if p = 1 

for convenience. We write each basis element of Hi\Xi(£)(C), ZJ as a 
T 2 / <8> Q-linear combination 

p 

We can compute the periods using the adjointness property of the integration 
pairing with respect to Hecke operators as follows: 

/ f(r)dr = I f(r)dr = W (T j>p f)(r)dr = £ A ilP / f(r)dr, 

Jjj JH p Tj,pW p p Jw p p Jw p 

where Xj tP G C denotes the eigenvalue of the newform / for the Hecke operator 
T 

Consequently, all we need is to compute the integrals f f(r)dr. Given 
a cuspform 

and x a Dirichlet character modulo p ^ £, one defines the twisted cuspform@ 

/ ® X = ^2a n x(n)q n . 

4 Indccd, twisting by a Dirichlet character whose modulus is prime to the level preserves 
cuspforms, though it raises the level, cf |AL78j . proposition 3.1. 



OO, 



p 



S ( r iO): 
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It is a cuspform of level £p 2 . The Fricke involution Wi transforms the form 
f(r) into j}pf (j^)- It is useful for our purpose in that it can be used to 
move a r with small imaginary part to which can have a much larger 
imaginary part. We read in |BosC6] . section 6.2, that if / = q + J2 n ^2 an( f e 
S l 2(r 1 (£), e) is a newform with weight 2, level £ and character e, then Wtf is 
the newform with weight 2, level £ and conjugate character e defined by 



W e f = X e (f) (g + ^<vf 



where A^(/) is given by 



— ai if e is trivial, 



— - — it e is nontnvial, 

where <?(•) denotes the Gauss sum of a Dirichlet character. Moreover, if / is 
a newform of weight 2 with character e, one has the formula 

%(/ ® x) = ^e(p) X (-£) ■ (Wtf)®* 

g(x) 

An easy computation shows that 

x(a)f(r + a/p)=g(x)U'®X)(r). 

a mod p 

This yields the formula 

9|| p-;j^( /8 t)) wdT+ 4( /8 C- ,lWdT 

91 ^JJUf 







'''E(*- e <p)(^)wfe;)^(«-*) 



2tt \n 



2m 

n=l 
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which allows us to compute the integral of a newform along a twisted winding 
element, and thus to finally compute the period lattice of the modular curve 

X\{£). We sum power series at q = e p^ 1 for small primes ]H which has 
small enough modulus to achieve fast convergence. 

3.2 Arithmetic in the jacobian J\(£) 

In order to efficiently compute in the jacobian J\(£), we use K. Khuri- 
Makdisi's algorithms [KM04] [KM07J. This requires choosing an effective 
divisor D of degree d ^ 2g + 1 such that we know how to compute the 
associated complete linear series 

V = H°(X 1 (£),3D ). 

A divisor class x G J\{£) is then represented by an effective divisor D of 
degree D Q such that the class of D — D Q is x, and D is itself represented by 
the subspace 

W D = H°(X 1 {£),3D -D) CV; 
in particular G Ji(£) can be represented by 

W = H°(X 1 (£),2D ) C V. 

Let us first give an overview of how to achieve this. Our strategy consists 
in choosing D = K + (ci) + (c 2 ) + (c 3 ), where K is an effective canonical 
divisor, and the q are cusps, thus for us do = 2g + 1 exactly. First, we 
compute the (g + 2)-dimensional space 

V 2 = H°(X 1 (£) i n 1 (c 1 + c 2 + c 3 )). 

This space is the direct sum of all the cusp forms of weight 2 and of the scalar 
multiples of Eisenstein series e% t 2 and of weight 2 vanishing at all cusps 
except ci and c 2 for ei )2 and except c\ and c 3 for e% i3 , 

V 2 = S 2 (Ttil) , C) © Ce 1)2 © Ce 1>3 C M 2 (T^i) , C) . 

5 We have checked p ^ 3 is very often sufficient, and p 7 is enough for all levels I ^ 61, 
except for I = 37 in which case we had to go up to p = 19. 
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The point of this is that by picking a rational cusp form f G S 2 (Y (£) , Q) , 
we obtain an isomorphism 



V 2 ^ ^(X^K + a + cz + ca) 

J fo 

where K is the divisor of the differential 1-form over Xi(£) associated to the 
cuspform fo, which is indeed an effective canonical divisor. Now by [KM04J, 
lemma 2.2, the map 

v m _^ tf°(X 1 (£),3(ir + c 1 + c 2 + c 3 )) 

/1/2/3 



fi ® h ® f: 



/o 3 



is surjective. We may thus choose V to be the image of the multiplication 
map 

Vf 3 — > M 6 (Y 1 (£),C) 
/i®/ 2 ®/ 3 i— > /1/2/3 

In this framework, the subspace Wo representing G J\{£) is the image of 
the map 

v® 2 — > M 6 (r a (*),c) 
/i<8>/ 2 ' — >■ /1/2/0 

From now on, we will implicitly identify weight-6 modular form spaces with 
the corresponding modular function spaces obtained by dividing by /q. 

We represent the weight-6 forms by their g-expansions at each cusp0. 
The modular curve X (£) has exactly two cusps, namely T (£)oo and T (£)0, 
whereas the modular curve we're interested in, Xi(£), has exactly £ — 1 cusps, 
half of which lie above T (£)oo while the other half lie above T (£)0. We call 
the former cusps above 00 and the latter cusps above 0. The cusps above 
are all rational, whereas the cusps above 00 make up a single Galois orbit. 
Now, the diamond operators (d), d G (Z/fZ)*, which correspond to the action 
of the quotient goup Yq^/Y^) ~ (Z/£Z)*, orbit the cusp Y x {£)oo onto the 
cusps above 00, and the cusp Y\{£)Q onto the cusps above 0. Moreover, 



6 We could also have represented forms by their g-expansions at 00 only, but we think 
using g-expansions at various cusps is better for numerical stability. Also we'll later need 
to be able to evaluate the forms at various points of the modular curve, hence it is better 
to know the g-expansions at various places. 
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the Fricke operator W(, swaps T\{i)oo and Fi(£)0. We know how the Fricke 
operator acts on newforms of weight 2 (cf subsection 13.11 on the periods), 
and on Eisenstein series (cf next subsection 13.31) . Besides, all the forms we 
are dealing with with have characters, so that the action of the diamond 
operators (d) on their g-expansions boils down to multiplying by the value 
of their character at d. Using these two kinds of operators, we thus get the 
g-expansions of the newforms and of the Eisenstein series at all cusps from 
their g-expansions at oo. 



3.3 Finding the appropriate Eisenstein series 

We now explain how to choose the Eisenstein series ei )2 and ei j3 . Let us first 
review some facts about Eisenstein series of weight 2 in general (not neces- 
sarily prime) level N. From [DS05J, chapter 4, we know that the Eisenstein 
subspace of M 2 (Ti(iV), C) has a basis formed of the Eisenstein series 

r=0 s=0 t=0 (c,d)& 2 V ' 

c=rv mod N 
d=s+tv mod N 

where if) and ip are Dirichlet characters not both trivial, of the same par- 
ity, and of respective conductors u and v such that uv = N exactly. We 
furthermore have the g-expansion at oo 



E*«{t) = -1 U J- V{a)a (± + l) + 2 £ 



if>(n/m)<p(m)m 



a=0 n=l 



i m>0 
\ m\n 

where Ep^ is the normalisation of G\ ,<p defined by the relation 

^ _ -4?r 2 g(^) ^ 

G 2 - ~2 ^2 , 

and where g(-) denotes the Gauss sum of a Dirichlet character. Also, G^ ,ip G 
M2\Ti(N),if>cp) has character ifxp, where ifxp is seen as a Dirichlet character 
modulo N. 

Consequently, in the case when N = £ is prime, we are left with only two 
cases, namely G^' 1 and G 2 ' x , where \ is a nontrivial even Dirichlet character 



q", 



12 



modulo i. Both have character x, and Go' 1 vanishes at oo while G\' x does 



not. 



We easily check the formula 



4^ , (vcT + d) 2 ' 



from which it is clear that 



and thus 



-DE, 



g(ip) u 

We construct Eisenstein series e\$ and ej.,3 as linear combinations of the 
E x,1, s and the i? 2 ' x 's, because they have nicer g-expansions than their G- 
counterparts. First, we choose the cusps Ci, c 2 and c 3 to bd3 ci = Ti(£)0, 



c 2 = (2)ci, and c 3 = (3)ci, so that they are all defined over 
have from the above formulae 



Next, we 



W e E 2 - 



#(x) 



E 1,x 

^2 



and 



(— \ nj 2 i 

9{X) 



from which we read that E x,x vanishes at the cusps above oo but not at 
the cusps above 0, while the opposite stands true for E\' x . Consequently we 
construct ei j2 and as linear combinations of the E^ 1 only. Now, it follows 
easily from the orthogonality relations between Dirichlet characters that the 
Eisenstein series 



ei > 2 = E — - 

X even V _ . 



x(2) 



a a 



+ 1 



a=0 



7 These are all distinct as £ 11. 

8 This way, as the canonical divisor K is Galois-invariant since it is the divisor of 
fa G >S2(ro(£), QJ, whose g-expansion at is thus easily proved to be rational, our divisor 
Do used to run K. Khuri-Makdisi algorithms will be Galois-invariant, yielding a good 
behaviour with respect to the Galois action. 
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and 

e l,3 - 2^ —1 ^2 

X even ^ — \ ( CL \ 

a=0 

meet the requirements, that is to say e^a vanishes at all cusps but ci and C2, 
and ei^ vanishes at all cusps but c\ and C3. 

3.4 Reducing the rough approximations of the torsion 
divisors 

We have to reduce the divisors -D^ lg , k = 1, 2. We describe below an algorithm 
to reduce a general, null-degree divisor 

^ big = E^(ra-ra), 

n 

where the v n G Z are large integers, that is to say to compute the subspace 
Wd representing an effective divisor D of degree do such that D — Do ~ D hlg . 
This algorithm is to be used in parallel on the two divisors D± lg and D^ lg , 
and we will denote by _DJ rude and D% the resulting reduced divisors. 

For this we use K. Khuri-Makdisi's algorithms [KM04| [KMn7j . These 
algorithms can only be input effective divisors D of degree do exactly, by 
computing subspaces 

W D = H° (Xx (£) , 3D - D) C V = H° (X 1 (£) ,3D ) 

using linear algebra. 

We first rearranged the sum defining D bls into the form 

29 

^^X>*>«(( P n)-(^n)), 
i n=l 

where the Ni and the mj >n are integers such that Y^n=x \ m i,n\ = do for each i 
and |m i>n | ^ 2. We then input the subsums Y^n=i m i,n({Pn) — {Pn)) for each 
i separately as follows. Letting 



{Q'mQn) 



{P' n , P n ) if m i>n ^ 0, 
(P n ,P^) ifm hn <0, 



9 This may require padding with a few cusps, cf the divisor Z? pac iding in the 
Incxt subsection! 
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so that we have 



and 



2g 2g 

J2 m U( P n) ~ (Pn)) =J2\ m *MQ'n) - (Qn)), 
n=l n=l 

we compute the subspaces 

W = H° l^), 3A) - J2 \™i,n\QnJ C V 

W = H° (^Xtii), 3A> - J2 MQ'^j c V 

by linear algebra, which is possible since we can evaluate the forms in the 
basis of V and their derivatives^! at the points Q n , Q' n by using their q- 
expansions at the closest cusps. Our assumption that Y^n=i \ m iA = d 
ensures we are inputting divisors of the correct degree do- Next, we use K. 
Khuri-Makdisi's algorithm to "subtract" these subspaces, meaning we find 
the subspace 

W Di = H°(Xi(£),3D - A) CV, 
where Z), is an effective divisor of degree do such that 

Di-D ~Y,\rrkMQn)-(Qn))- 



n=l 



We then use K. Khuri-Makdisi's algorithm in a fast exponentiation pattern 
in order to compute 

W D . Ni = H°(X 1 (£),3D - D i>Ni ) c V 

where 

D i>Ni -D ~ N^Di-Do), 
and finally "Makdisi-sum" over i so as to get the subspace 

W D = H°(X 1 (£),3D -D) cV, 



10 As we required that \mk,i, n \ ^ 2, we have Oth- and lst-order derivatives only to 
evaluate, which we think ensures better numerical stability. 
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where 

3 

D-D ~Y,( D W- D °)- 

i=i 

We then indeed have 

D - D ~ ^ E ™v>(( p n) - • 

j n=l 

On a final note, we would like to point out that these computations can 
easily be parallelised, first by processing the divisors D^ lg and D^ lg in parallel 
of course, but also by processing the subblocks indexed by % in parallel too. 

3.5 Refining the torsion divisors 

We use Newton iteration in order to refine the two previously-computed 
crude approximations _D" udc — D , k = 1,2, of ^-torsion divisors into very- 
high-accuracy approximations Df 110 — D of these ^-torsion divisors. More 
precisely, we Newton-iterate the equation 

£(D - D ) ~ 0. 

However, our divisors are represented in Makdisi form, that is to say by a 
subspace Wd C V . We thus need coordinate charts which are compatible 
with this representation. We need one chart ip from a neighbourhood of 
G C 9 to a neighbourhood of G Ji(£)(C) in order to be able to adjust 
the divisor we are working on, and another chart ip from a neighbourhood of 
G Ji(£)(C) to C 9 so as to check how far from linearly equivalent to zero £ 
times the divisor we are working on is. 

First, pick g cusps ci, • • • , c g . For each of these cusps, we have an analytic 
map, the "g-coordinate" around q 

Ki :E— >X 1 (*)(C), 

where E stands for the open unit disk in C, which maps to the cusp q and 
which is a local diffeomorphism. Next, choose g complex numbers qi, ■ • ■ , q g 
of small moduli, so that each point Pj = K^qj) is close to the cusp q. Also, 
initialise another vector of g complex numbers 5q±, • • • , 5q g to 0. Denoting 
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by P[ the points + Sqi), our first chart is then 

i=i 

where C/ is a suitable neighbourhood of G E 9 . In other words, the pertur- 
bation we add to the divisor we are working on so as to make it ^-torsion 
is ^2i =1 (P{) — (Pi), where Pi has g-coordinate qi and P[ has g-coordinate 
qi + 5qi. In order to have this work in Makdisi representation, we choose once 
and for all an effective divisor -D pa dding of degree d — g, and then we compute 
the subspaces 

W = H° fx, (£) , 3 D - Pi ~ ^Padding )cV = H°(X 1 (£) , 3D ) 
^ i=i ' 

S v ' 

degree do 

and 

W = H° (x, (£) ,3D -J2 p l- ^Padding )cV = H°(X 1 (£) ,3D ) 
^ i=i ' 

S v ' 

degree do 

by linear algebra, exactly as in the previous part (we need to add the extra 
divisor -D pa dding so as to ensure we deal with effective divisors of the correct 
degree do). We then finally use K. Khuri-Makdisi's algorithm to compute the 
subspace W C V representing the difference of these two divisors. We choose 
the coordinates qi or the points so that the differential of the map tp thus 
constructed is of full rank g, and not too ill-conditioned as well. Shrinking 
U C E ff if necessary, the map tp is therefore a diffeomorphism from U 3 to 
a neighbourhood of G Ji(f)(C), as desired. 

Now that we know how to construct a small perturbation divisor in Mak- 
disi form, we can add it to the divisor /}™ udc we want to refine into ^-torsion. 
We then multiply the result by £, using K. Khuri-Makdisi's algorithms in 
a fast exponentation pattern. The result should thus be linearly equivalent 
to zero once the perturtation divisor, that is to say the vector (Sq^i^g, is 
suitably adjusted. In order to know where we are in the jacobian and to ad- 
just the Sq^s accordingly, we need a coordinate chart working with Makdisi 
representation around G Ji(£)(C). 



tp: UCE° ^ (X^C)) 9 — ► 
(Sqi) l^Kg 1 > (P[)lH'Kg 1 > 
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Now there is an issue we have to overcome. A divisor class x G Ji(£)(C) 
is represented by a subspace Wd = H°{Xi(£),3D — D) C V, where D is 
an effective divisor of degree d = 2g + 1 such that [D — D — D ] = x; but 
such a D is far from uniqud"]! Thus, the first thing to do is to rigidify the 
representation Wd of x into a representation which depends on x only. To 
do this, we compute the sub-subspace 

W D , Ted = H°(X 1 (£), 3D -D- C x ) c W D , 

where C\ is a fixecf^l effective divisor of degree d\ = 2d — g, so that Wd,^ 
will generically be 1-dimensional by the Riemann-Roch theorem. Letting 
sd G V be such that sd spans WD,red over C, we know that the divisor of sd 
is of the form 

(sd) = -3D + D + C 1 + E D , 

where Ed is some effective divisor of degree g. As such, it generically sits 
alone in its linear equivalence class, again by the Riemann-Roch theorem. 
But on the other hand, if Wd and Wd 1 both represent the same point 
x G J\(£)(C), then D ~ D' , so that Ed ~ Ed> as D and C\ are fixed. 
Consequently, we (generically) have Ed = Ed>, so that Wd >-> Ed is the 
invariant we are looking for. In order to effectively compute Ed, we use a 
trick a la Makdisi: we first compute 

s D ■ V = H^X^^Do -D-d- E D ), 

after which we compute 

H°(X 1 (£),3D - d - E D ) = {v G V \ vW D C s D ■ V], 

all of this by linear algebra as in [KM04J and |KM07j . The divisor class of 
D is characterised by this subspace, but we would rather represent it by g 
complex coordinates than by a point in a grassmannian variety. For this, we 
fix another effective divisocj C2 of degree c?2 = do + 1 — g chosen so that the 

n To be precise, by the Riemann-Roch theorem, there is a whole (g + l)-dimensional 
projective space of such D's. 

12 It proves convenient to choose a divisor C\ supported by cusps, so that the g-series 
are effortless to evaluate during the linear algebra part of the process, hence the notation 
Cx. 

13 Again, it is convenient to choose a divisor C2 which is supported by cusps, for the 
same reasons as previously. 
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subspace H°(Xi(£), 3D — C\ — C 2 — E D ) of the previously computed space 
H°(Xi(£), 3D$ — C\ — Ed) is generically one-dimensional. When D varies, 
all of these one- dimensional subspaces are lines in the common space 

Ked )2 = H°(X 1 (£) : 3D - Q - C 2 ). 

Summing up, we thus obtain a computable map (actually defined on an open 
dense subset only, due to the genericity assumptions) 

Mi)(c) — ► p(K red , 2 ) ~ p^c 

W D i— )• H°(X 1 {£), 3D - & - C 2 - E D ) ' 

Furthermore, the divisor of a nonzero section in H°(Xi(£), 3D — C\— C 2 — 
Ed) is of the form 

-3D + C 1 + C 2 + E D + R D , 

where Rd is a residual effective divisor of degree g. Consequently, the divisors 
having the same image as D are the divisors D' such that Ed> ^ Ed + Rd- 
This shows that this map has finite degree ( 2 J), hence is a local diffeomor- 
phism as desired. 

In order to have coordinates in C 9 instead of P 9 C, we can dehomogenise, 
for instance with respect to the coordinate the origin Wo has the highest mod- 
ulus at, in view of numerical stability. Restricting to divisor classes meeting 
the genericity assumptions and mapped to this inhomoegeneous chart do- 
main, we finally obtain our chart ip from a neighbourhood 14 ! of G J\(£)(C) 
to C g . 

14 We choose C\ and C2 such that is well-inside the domain of the chart ip. 
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To sum up, the general picture is as follows 



Chart 




(5q 



Chart ip 



iZU(Pl) - (Pi)} 

[pcrude _ Dq + ^UiPD ~ (Pi 
£[ jD crude_ jDo + E , = i(j p /) _ ( p ?;) ] 

H°(X 1 (£),3D -C 1 -C 2 -E D ) 
Coordinates. 



Denoting the compositum of these maps by $ : U — > C 9 , we are thus led to 
solve the equation 

$(<*<&,■•• ,Sq g )=^(W ). 

As $ maps C 9 to C 9 , we can use standard Newton iteration techniques for 
this. However, the map $ is rather convoluted, so estimating its differential, 
which is necessary for Newton iteration, is quite dimcultllj. Therefore, we 
simply re-estimate this differential in each Newton iteration, by computing 
the growth rates in each direction 




U + h, ■ - • , 5q g ) - <&(8q 



lj 



6 % 



h 



lD Estimating this differential is actually possible: a computation using the implicit 
function theorem shows that it can be expressed as a sum over the zeroes of some function 
on X\ (£) . This sum can itself be rewritten as a contour integral using the residue theorem, 
but for this we need a contour on the compact Riemann surface Xi(£)(C) which surrounds 
these zeroes with indices 1, and such a contour is very hard to compute. 



20 



where h > decreases at the same rate as the distance • • • ,5q g ) — 

if)(Wo)\\ (say, for instance, h = ^\\$(8qi,--- ,5q g ) — i>{Wo)\\). It is easily 
checked that such a pattern still yields quadratic convergence. Of course, as 
$ is expensive to compute with, the grow rates in each direction should be 
computed in parallel. Once ■ ■ • , 5q g ) — ip(Wo)\\ has shrinked below 

the required accuracy, we can stop the iteration process. 



3.6 Evaluating the torsion divisors 

We need a Galois-equivariant function a £ Q(-Ji(£)) which can be efficiently 
evaluated at every point x £ V/j given in Makdisi form. We then evaluate a 
at each nonzero point of V}j, and form the polynomial 

nx) = n ( x - «(*)) e w 

which defines the Galois representation p/j. In order to recognise its coef- 
ficients as rational numbers, we compute the continued fraction expansion 
of each of them until we find a huge term. Clearly, the lower the height of 
F(X) the better, as it requires less precision in C. This means one should 
use an evaluation function a whose divisor of poles (or zeroes) belongs to an 
as- "small" -as-possible class in the Neron-Severi group of Ji(£). 

The classical approach, used in |CEC3j . |EdiC14j . |Bos07] and |Zenl2j . 
consists in selecting a rational function £ on X\(i) defined over Q and ex- 
tending it to J\{£) by 

S: Ji{£) — )• C 

9 9 

i=i i=i 

where O £ Xi(£)(Q) is an origin for the Abel-Jacobi map. The divisor of the 
poles of H is 

(S)oo = T*q_ 0] Q, 
Q pole of f 

where O is the theta divisor on Ji(£) associated to the Abel-Jacobi map with 
origin O. We thus see that (5)^ is the sum of deg£ translates of O, so that 
£ should be chosen to have degree as low as possible. However, this degree 
is at least the gonality of Xi(£), which is roughly g. 
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We introduce a radically different method, which can be used on the 
jacobian of any algebraic curve X, the genus of which we'll denote by g. Any 
point x £ Jac(X) can be written [E x — gO], where E x is an effective divisor 
of degree g on X which is generically unique, and O £ X is a fixed point. 
Let II be a fixed divisor on X of degree 2g. Then the space H°(X, IT — E x ) 
is generically 1-dimensional over C, say spanned by t x £ C(X). The divisor 
of t x is of the form (t x ) = —Tl + E x + R x , where R x is a residual effective 
divisor of degree g onl, which is the image of E x by the reflection 

R n : Pic 9 {X) — > Pic 9 {X) 

[e\ [n - e\ ■ w 

Letting A and B be two points on X disjoint from the support of n, we can 
then define 

a: Jac(X) — ► C 

T . , UAL ■ 

X t x (B) 

This map is well-defined on a dense Zariski subset of Jac(X), and it is defined 
over (Q) if X, IT, A, B and O are defined over Q. Moreover, it has a pole at 
x £ Jac(X) if and only if [E x — gO] or [R x — gO] are on the support of 
r [B-o]®- ~ dO] * s ^ ne i ma g e °f [E x — gO] by the involution 



so 



finally we secj that the divisor of poles of a if the sum of only two translates 
of G, which is always much better than the 5 used in the classical approach. 
It is even in some sense optimal, at least for a general curve, as by the 
Riemann-Roch theorem for abelian varieties (cf fHSOOj, theorem A. 5. 3. 3), 
no nonconstant function on Jac(X) has a single translate of B as divisor of 
poles. 

In order to use this on the modular curve Xi(£), we choose II = 3Dq — 



C1 — C2, where C\ and C2 are divisors as in the |previous subsection| If these 
divisors are chosen to be defined over Q, then by construction of D , U is 
also defined over Q. It is then easy to compute t x for x = [D — D ] £ Ji(£) 
represented in Makdisi form by Wd C V, as it is the exact same process 



as the one used in the previous subsection to define the coordinate chart 



-0. Using the resulting map a on Vfj, we may thus hope to get a defining 
polynomial E(X) of logarithmic height g/2 times less than if we had used 
the classical approach. 



16 We have Rn = r n o [— 1], and [— 1]*0 = t£6 is the translate of by the image K of 
the canonical class, cf |HS00j . theorem A.8.2.1.L 
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3.7 Finding the Probenius elements 

After evaluating the torsion divisors by a suitable function, we get a poly- 
nomial F(X) G Q[X] of degree £ 2 — 1 whose decomposition field is the fixed 
field L by the kernel of the Galois representation. It is thus a Galois number 
field, and its Galois group over Q is embedded by the representation as a 
subgroup of GL 2 (¥i). In order to completely specify the Galois representa- 
tion, we would like to know what the Frobenius elements ( ) are similar 

n ^ p ' 

to, for almost alO rational primes p. This can be used to get congruence 

relations modulo i on the coefficients a p of the cuspform /, by looking at the 

trace of the similarity class of (^—^ j ■ 

For this, we adapt Tim and Vladimir Dokchitser's work |DoklOj . Al- 
though the Dokchitsers focus on the general case of identifying Frobenius 
elements classes as conjugation classes in the symmetric group & n acting on 
the roots of a defining polynomial, their work can easily be adapted to our 
needs. This yields the following result: denoting by (aj)i^i<^2 the roots of F 
in L, if h(X) G Z[A] is a polynomial with integer coefficients, then for each 
similarity class C C GZ^F^), the resolvent polynomial 



tG C* \ i=l 



lies in Q[X]. Moreover, if p is a rational prime which divides none of the 
coefficients of F, so that the polynomials Tc are p-integral, which does not 
divide the discriminant of F, and such that the T^'s are pairwise coprime 
modulo p, then the image by the Galois representation of the Frobenius 

element (^^^j lies in the similarity class C if and only if 



A c ( Tr Fp[ x] h(a)aP ) = 

\ 7\x)' p J 



where a denotes the class of X in the quotient algebra F P [A]/ (F(A)). Fur- 
thermore, the polynomials Tc are pairwise coprime over Q for a generic choice 
of h(X) amongst the polynomials of degree at most £ 2 — 2 with coefficients 
in Z. 



17 Clearly, we have to exclude p — £, as L is ramified at £. We will shortly see that we 
actually have to exclude finitely many other primes as well. 
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We first start by computing the roots cij to a very high precision in C 
using Newton iteration (note we already know them to a mildly high preci- 
sion). Then, we compute complex approximations of the resolvents Tc by 
enumerating matrices in the similarity classes of GL2(¥e). Finally, we recog- 
nise the coefficients of the resolvents as rationals, using our knowledge of an 
a priori multiple of their denominators, namely a common denominator for 
the coefficients of F to the cardinality of C times one plus the degree of h. 
In practice, the choice h{X) = X 2 has always worked, in that the resulting 
resolvents Tc we have computed have always been pairwise coprime over Q, 
and actually, in all the computations we have run, they have even always 
remained coprime modulo p as long as p was reasonably largj^l. say at least 
10 decimal digits. 

Once the resolvents are computed, it is easy to compute what Frobenius 
elements ^-^p j are similar to, and hence to deduce the coefficients of the 
cuspform / modulo [. 



18 As the primary goal of our computations is to find the coefficients a p of the (/-expansion 
of / modulo £, the only case we are really interested in is the case in which p is extremely 
large, as naive methods compute a p for small p in almost no time anyway. 
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4 Results 



As the above algorithms compute the full Galois representation, we get re- 
sults which are more complete than the ones from [Bos07j. For instance, 
picking £ = 19 (which corresponds to genus 7), we can compute the Galois 
representation pa,i9 modulo 19 associated to the newform 



f = A = q H(l- q n r = J2r(n)q n 



n=l 



n=l 



of weight 12, find the similarity class in GZ^Fig) of the images of Frobenius 
elements, and hence find the signs which were missing in the table on the 
very first page of |EC11] : 



The image of the Frobenius at p — 10 1000 +135 7 is similar to 
therefore r(10 1000 + 13 57) = -4 mod 19, 

The image of the Frobenius at p = 10 1000 + 73 83 is similar to 
therefore r(10 1000 + 7383) = +2 mod 19, 

The image of the Frobenius at p = 10 1000 +21567 is similar to 
therefore r(10 1000 + 21567) = +3 mod 19, 

The image of the Frobenius at p — 10 1000 + 27 5 7 is similar to 
therefore r(10 1000 + 27057) = mod 19, 

The image of the Frobenius at p — 10 1000 +46227 is similar to 
therefore r(10 1000 + 46227) = mod 19, 

The image of the Frobenius at p = 10 1000 +57867 is similar to 
therefore r(10 1000 + 57867) = mod 19, 

The image of the Frobenius at p = 10 1000 +64749 is similar to 
therefore r(10 1000 + 64749) = +7 mod 19, 



17 1 
17 



1 1 
1 



11 1 
11 



10 
9 



14 

1 



17 
2 



13 1 
13 
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The image of the Frobenius at p — 10 1000 + 68 3 6 7 is similar to 
therefore r(10 1000 + 68367) = mod 19, 

The image of the Frobenius at p = 10 1000 + 78 1 99 is similar to 
therefore r(10 1000 + 78 1 99) = -8 mod 19, 

The image of the Frobenius at p — 10 1000 + 128647 is similar to 
therefore r(10 1000 + 128647) = mod 19. 



14 
5 



15 1 
15 



8 

1 



Note that as A has weight 12, in each case, the determinant is congruent 
top 11 mod 19, as expected. The surprising number of occurences of non-semi- 
simple matrices - - by the Chebotarev theorem, non-semi-simple matrices 
should occur with density about \jl only — and of r{p) = mod 19 above 
can be explained by the fact that J. Bosman purposedly chose special values 
of p (cf |BosC7j . section 7.4). For instance, for the few other first primes 
above 10 1000 , we have computed the following: 
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p 


Similarity class of 


10 iooo + 




15 
10 




10 iooo + 2713 




"11 0" 

4 




10 1000 + 4351 




"60" 
4 




10 iooo + 5733 




" 16 " 
1 




10 iooo + 1040 i 




" 15 " 

1 8 




10 1000 + 119 79 




16 
13 




10 iooo + 175 57 




" 5 
1 11 




10 iooo + 22273 




" 13 " 
1 




10 iooo + 24493 




14 
10 




10 1000 + 25947 




"04" 
1 5 




10 iooo + 29737 




" 12 " 
1 7 




10 iooo + 41599 




18 
15 





This agrees with the Chebotarev theorem. 

We have implemented the above algorithms in |SAGEj . version 5.3, and 
have run them on PlaFRIM, the Bordeaux 1 university computing cluster. 
For £ = 19, the computation times were as follows: computing the period 
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lattice, the g-expansion of the cuspforms and the Eisenstein series, and finally 
initialising K. Khuri-Makdisi's algorithms by computing the spaces V and Wo 
took just a few minutes, inputting and simplifying the crude approximations 
of the two 19-torsion divisors took about one hour and a half (each, but they 
were processed in parallel), refining them by Newton iteration took a little 
less than 10 hours, computing all the points in the F 19 -plane spanned by 
them took about 40 minutes. We found a polynomial F £ Q[X] defining 
the representation, of degree 360 = 19 2 — 1 and with a common denominator 
of 142 decimal digits, and finally, computing the resolvents Fc(X) took 7 
hours thanks to a massive parallelisation, after which deducing the similarity 
classes of the image of a Frobenius element at p ~ 10 1000 takes two-and-a-half 
hours. Overall, the whole computation thus lasted about 20 hours. We think 
these times could be reduced by an important constant factor if one rewrote 
in C language and optimised the core parts (that is to say, mainly the linear 
algebra over C), but we have not had time to do it yet. 

Complexity estimates and prospects 

Clearly, the most time-consuming part of this algorithm is the arithmetic 
in the jacobian. K. Khuri-Makdisi's algorithms rely on linear algebra on 
matrices of size 0(g) xO(g); as g = 0(£ 2 ), this suggests a complexity of 0(£ 6 ) 
operations in C to compute the Galois representation. The experiments we 
have run seem to indicate the required precision in C is 0(£ 2 ), so that we can 
estimate the general complexity of our method to be 0(£ s ) bit operations. We 
do not try to refine this estimate, because as we do not know any proven sharp 
bound on the height of the polynomial F(X) defining the representation, we 
lack control on the precision. 

We are currently running computations at level £ = 29 (genus 22). In- 
deed, We had to skip £ = 23 (genus 12) because the representation pa,23 
degenerates. This phenomenon is related to Ramanujan-type congruences 
for r(n) mod 23, cf the top of the fifth page of [EdiClj and the first footnote 
in the introduction of this paper. 
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